Buying botanical supplements online safely comes down to six checks you can run before you enter a card number: does the seller verify your age, does the product arrive sealed and batch-marked, are lab certificates published before purchase rather than promised after, does the store enforce shipping restrictions, is payment handled by a real processor, and can you find out who the company actually is. A seller failing any one of those is telling you something. A seller failing three is not a seller you should be buying consumables from.
This category has more grey-market operators than most, and the 5 August 2026 scheduling deadline has produced a wave of sites clearing inventory in ways that put the buyer, not the seller, at the sharp end. Here is how to sort them.
The six-point check
| Check | Good sign | Walk away |
|---|---|---|
| Age verification | 21+ gate at entry and at checkout | No gate at all, or a gate you can dismiss |
| Packaging | Factory seal intact, lot and expiry printed on the pack | Loose units, resealed bags, handwritten or stickered lot codes |
| Certificates | PDFs published on the site, before you buy | "COA available on request," or a cropped screenshot |
| Shipping rules | Restricted destinations blocked at checkout | "We ship discreetly anywhere" |
| Payment | Standard card checkout over HTTPS | Zelle, Venmo, wire or crypto only |
| Seller identity | Legal entity name, physical address, working support | A contact form and nothing else |
Does the seller verify your age?
Everything in this category is for adults 21 and over. A store that takes that seriously gates the site at entry and re-checks at checkout, and it will not sell to you if you decline.
A dismissible pop-up is theatre. So is a birthdate field with no validation. The point is not that a determined buyer can be stopped — it is that a store willing to skip age verification because it costs conversions is a store making that trade-off everywhere else too, including on the checks you cannot see. Age gating is the cheapest possible signal of whether a seller treats compliance as a cost or as the job.
Does the product arrive sealed and traceable?
When the box arrives, inspect it before opening anything.
- Factory seal. Blister foil unbroken, induction seal intact under the cap, shrink band unbroken. Any of these compromised means do not consume it.
- Lot or batch code. Printed or laser-etched by the manufacturer, not written on with a marker and not on a sticker covering another sticker.
- Expiry or best-before date. Present, legible, and in the future.
- Manufacturer or distributor name and address. A supplement label is legally required to carry one. Its absence is not a design choice.
- Supplement Facts panel. Present and readable, not obscured by a retailer sticker. If you want to get more out of it, we cover the panel in detail in how to read a supplement facts panel.
- Single units sold loose. A tablet or sachet shipped out of its retail packaging cannot be traced to a batch at all.
If something arrives opened or unsealed, photograph it before touching it further, do not consume it, and contact the seller. How they respond to that email is more informative than anything on their homepage.
Are certificates published before you buy?
The gap between "third-party tested" as a badge and an actual downloadable PDF is where most of this industry lives. Published means: a full certificate, on the site, accessible without an account, with the laboratory's name and address, its accreditation number, the analyte list, the detection limits, the dates and a signature.
Two things to check that most buyers skip. First, whether the report can be matched to the product you are being sold — right product name, right strength, right format. Second, and more important, which compounds are on the panel at all. A non-detect result covers only what the method looked for; anything missing from the analyte list was not cleared, it was simply not examined. We wrote nine red flags on a certificate of analysis specifically because panel coverage is the failure almost nobody checks, and we publish the supplier certificates we hold, gaps described, on our COA page.
A seller who cannot explain what their panel does not cover has not read it.
Does the store enforce shipping restrictions?
Legality in this category depends on the specific formulation and on state and local law, and those laws differ and keep moving. A store that has done its homework blocks restricted destinations at checkout, so a non-compliant order fails before payment rather than shipping and being seized.
Treat "we ship discreetly to all 50 states" as a warning rather than a feature. Discretion in shipping language is usually about evading a restriction, and the person holding the package when a restriction bites is you, not the merchant. Check the rules where you live first — the federal side is covered in is 7-OH banned, which is a starting point and not legal advice.
Is payment handled properly?
This category has genuine payment-processing difficulty, and some sellers respond by pushing buyers onto payment rails with no consumer protection. That shifts all of the risk onto you.
- Card checkout on an HTTPS page is the baseline. Cards give you chargeback rights. Those rights are the entire reason this matters.
- Peer-to-peer apps, wires and crypto are effectively final. Zelle, Venmo, Cash App, bank transfers and cryptocurrency have no meaningful dispute process. A merchant who will only take those has removed your recourse by design.
- Never send card details by email, chat or over the phone. A legitimate store never needs them that way. Enter them only into the checkout page itself.
- No store needs your Social Security number or your bank login. Any request for either is a fraud attempt, full stop.
- The padlock is necessary but not sufficient. HTTPS means the connection is encrypted, not that the company is honest. Fraudulent sites have certificates too.
- Watch for forced account creation and stored cards. Guest checkout should exist. If it does not, use a virtual or single-use card number.
One more: read what the site does with your data before you fill in a form, and be wary of any store that wants far more personal information than a shipment requires.
Can you tell who the seller is?
Transparency is cheap for an honest business and expensive for a dishonest one, which is why it discriminates so well.
Look for a legal entity name, a physical address, a working phone or email that gets answered by a person, published returns and shipping policies with actual numbers in them, and a named brand list rather than vague references to "our products." Search the company name and see whether anything exists outside its own website.
One specific tell: does the seller distinguish between what it makes and what it carries? We are a distributor and retailer — we do not manufacture, formulate or private-label anything, and every product we list was made by a third-party brand. Sites that blur that line, describing other companies' formulations as though they were their own recipe, are either careless about accuracy or counting on you not to check. Our terms and the limits of what we will claim are on our disclaimer page, and what we carry is in the Cat's Claw collection.
What changes on 5 August 2026
The DEA's temporary scheduling order takes effect on or after 5 August 2026, on the date it publishes. From that point, sale of the covered substances to the public is not permitted, there is no grace period, no sell-through allowance, and unregistered holders must surrender stock. The scheduling authority is 21 U.S.C. 811(h), and the statute does not allow the order itself to be challenged in court — so nobody should be selling you a story about a pending challenge. The practical detail is in what happens to 7-OH brands after August 5, 2026.
What this means for a buyer is a specific set of new red flags: "last chance before the ban" countdown banners, sudden deep discounts on inventory, offers to ship after the effective date, claims of a sell-through window, and sellers who cannot tell you which compounds their panel covers. A store liquidating stock against a deadline has an incentive structure pointed away from you.
Frequently Asked Questions
Is a store safe if it has hundreds of five-star reviews?
On-site reviews are controlled by the site and are the easiest thing on the page to fabricate. They tell you nothing about what is in a product. Published certificates, a traceable company and a real returns policy are harder to fake and worth more.
What if a seller offers a discount for paying by bank transfer or crypto?
Decline it. The discount is being funded by the consumer protection you would be giving up. If a merchant only accepts irreversible payment methods, assume disputes are common enough that they have engineered them out.
The product arrived without a batch number. What now?
Do not consume it and contact the seller for the batch. Without one, no certificate can be matched to what you are holding, and no claim about its contents can be verified. A seller who cannot produce it does not know either.
How can I tell whether a "lab tested" claim is real?
Open the actual document. Check that the laboratory has a name and a street address that exist independently, that a named person signed it, that dates are present and plausible, and that the compounds you care about appear in the analyte list. If any of those is missing, the phrase is decoration.
Should I buy these products from a smoke shop or a marketplace listing instead?
That is your call, but the same six checks apply and are usually harder to run there. A third-party marketplace listing often obscures who the actual seller is, and unsealed or loose units are more common. Whatever you decide, buy sealed retail packaging with a legible batch code and a certificate you can find.
These statements have not been evaluated by the U.S. Food and Drug Administration. These products are not intended to diagnose, treat, cure, or prevent any disease. For adults 21+. Legality depends on the specific formulation and applicable state law — check the rules where you live. Nothing here is legal advice.